Frequently asked questions.

VitaLog is a personal-health tracking app that connects every signal you log (bloodwork, workouts, compound protocols, nutrition, sleep, journal) and surfaces correlations between them. Free to use, EU-hosted, GDPR-first, no ads, no third-party trackers.

Two main audiences. First: people doing everyday tracking, workouts, nutrition, journal, sleep, bloodwork, weight, who want one app instead of five. Second: people running serious protocols (TRT, GLP-1, peptides, hormonal cycles) who want the correlation analytics that no general-purpose tracker provides. The same app works for both.

Yes. The core app is free forever. Joining the opt-in Research Program (sharing anonymized aggregates) unlocks every research-grade analytics surface for free; otherwise nothing is paywalled.

Yes. VitaLog is a Progressive Web App (PWA). Once installed, it works offline for logging, browsing your data, and using calculators. Sync resumes when you're back online.

Yes. On iOS Safari, tap the Share icon → "Add to Home Screen". On Android Chrome, tap the menu → "Install app". The app icon, offline support, and push notifications all work like a native app, but install is just a bookmark.

All data lives in encrypted Postgres on Neon (EU region) with TLS in flight and AES-256 at rest. Progress photos use client-side AES-256-GCM with PBKDF2-derived keys, we cannot decrypt them even under legal subpoena. No third-party trackers, no analytics SDKs, no advertising. Full security posture →

No. We do not run ads, do not embed third-party advertising or analytics SDKs, and do not share your personal data with advertising networks, data brokers, or marketing platforms. Your individual records, photos, and identity are never shared. The only commercial path that touches your data at all is the opt-in Research Program, where anonymized aggregates may be licensed to academic researchers, contract research organizations, and pharmaceutical sponsors. Opt-in only, withdraw anytime.

In the EU. Specifically: Cloudflare's EU edge (Workers, Pages, R2) and Neon's eu-central-1 region (Frankfurt) for the primary database. Four sub-processors total: Cloudflare, Neon, Resend (transactional email), Anthropic (bloodwork-image OCR, in-request only). All listed publicly with DPAs in place. See sub-processor list →

Yes, in one tap. Settings → Privacy → Export Data gives you a complete JSON dump of everything you've logged. Use it to keep a backup, port to another tool, or just have a copy.

Yes, in one tap. Settings → Account → Delete Account permanently removes your account and all associated data within 30 days (the retention window covers backup snapshots). No reactivation.

One first-party session cookie (httpOnly, SameSite=Strict) and several localStorage / sessionStorage keys, all functional, no third-party trackers. Full cookie policy →

Sweden. VitaLog operates under Swedish data-protection oversight (IMY, Integritetsskyddsmyndigheten). Any privacy complaint can be lodged with IMY directly.

No. VitaLog is a harm-reduction and tracking tool. We provide reference ranges, draw-timing guidance, dose calculators, and red-flag thresholds for people who are already running protocols, because pretending those people don't exist has never made anyone safer. We do not recommend anyone start a protocol, do not provide medical advice, and the entire compound surface is gated behind acceptance of our Acceptable Use Policy.

TRT (and other hormone-replacement protocols), GLP-1 weight-loss protocols (semaglutide, tirzepatide), peptide cycles (BPC-157, TB-500, sermorelin, ipamorelin, MK-677, etc.), SARM cycles, ancillary stacks, supplement protocols, and combinations. Custom compounds also supported.

No. VitaLog calculates volumes for a dose you specify, surfaces published reference ranges, and tracks how your numbers respond, but every dosing decision is yours. Always consult a qualified clinician.

Yes. PDF lab reports can be uploaded; we extract values and pin them on the timeline next to your protocol. CSV upload also supported. Manual entry is fine if you only have paper.

Auto-correlations between every data type you log. E.g., "your free-T moves +184 ng/dL in the 6 weeks after starting Test E 200 mg/wk", "training volume above 28k lb/wk correlates with hematocrit creep", "protein intake on workout days vs rest days has no correlation with strength PRs." Statistically grounded, we tell you the confidence, not just the number.

15 years old. Users under 15 are not permitted to use VitaLog under our Terms of Service.

Clean Mode hides compound, peptide, and protocol-management surfaces and adapts content to be age-appropriate. It is enforced for users 15-17 based on date of birth verified at signup. Once you turn 18, Clean Mode is no longer enforced, you can disable it from Settings if you want.

Yes. Settings → Clean Mode. Useful for users who want a simpler tracking surface without the compound features. Toggle on and off anytime.

You enter your date of birth during the onboarding wizard (after account creation, before any feature is reachable). The DOB is stored only long enough to compute age category, we keep an "is_minor" flag and an "age_verified_at" timestamp; the raw DOB is purged once age is computed.

An opt-in program where you share anonymized aggregate data (per-category, granular consent) in exchange for free unlock of all research-grade analytics inside the app. Your participation enables academic studies on harm-reduction patterns that no traditional EHR can support. Read the vision →

Whatever categories you opt in to: protocols, bloodwork, training, nutrition, outcomes. Always at the aggregate level (k-anonymity ≥ 5, your data is never released as an individual row). Journal entries, photos, email, and location are never shared, even if you opt in.

Yes, instantly. Settings → Research Program → Withdraw. Future contributions stop immediately. Past contributions can be excluded from new aggregate queries on request to privacy@vitalog.io.

Only IRB-approved academic researchers under a Data Access Agreement. We screen every request, run queries inside our own infrastructure (no raw rows leave), and publish a list of every study enabled. Researcher access process →

You can browse the public guides, calculators, and glossary without an account. Tracking your own data requires a free account so it can sync across your devices.

Because we don't want one. Donations + opt-in research-program participation cover operating costs. Adding a paid tier would create incentives we don't want, especially around what to gate behind the paywall in a health-data context.

Use the "Forgot password" link on the sign-in screen. We send a reset link to your email. If you have 2FA enabled, you'll also need your 2FA code.

Simple, low-fee, and avoids payment processors that would gate compound-related content under their AUPs. We may add traditional rails later (GitHub Sponsors, Stripe) but crypto is the path of least friction today.

No. Donations to VitaLog are gifts. VitaLog is not a registered charity. Always consult a tax professional for your jurisdiction's treatment of personal gifts.

100% to operations and infrastructure costs (Cloudflare, Neon, Resend, domain, equipment, the founder's time). VitaLog has no investors, no shareholders, and no profit motive.

No. The app is free for everyone. Donating is a thank-you, not a transaction. Donate page →

Yes. We're working on read-only sharing where users can grant a clinician or coach access to their tracking surface. PDF clinical-summary export already works (Settings → Export → Clinical Summary). Full provider sharing is on the P1 roadmap.

Yes. Standard Art. 28 GDPR Data Processing Agreement available on request to privacy@vitalog.io. We can also sign your template if it's compatible with our sub-processor list.